AI agents need security regression testing, not another checklist

AI agents are being connected to real systems faster than most organizations are learning how to secure them. The first wave of AI security discussion has been useful, but limited. The industry has learned the vocabulary: prompt injection, indirect prompt injection, tool misuse, data leakage, excessive agency, unsafe retrieval, and broken authorization boundaries.